Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: ztY1crSXUI/OMQ4SGPaXYR/vwuSMKwzlpDMoLsqovto=
Subject key identifier: BD:9D:DA:16:81:0E:C6:ED:46:F1:2F:E9:33:94:CB:C9:83:EA:71:1D
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 0199FC58F49090F9458A56C187541482485B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 0A89
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: I0RpWutqHUgWxGVtXEFLoiwDtDabQUb60Wm9shjXFaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f4:90:90:f9:45:8a:56:c1:87:54:14:82:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=bd9dda16810ec6ed46f12fe93394cbc983ea711d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:1b:56:55:2d:51:c1:86:b3:33:2c:f9:33:
f4:41:3d:99:8d:84:63:c8:2c:e0:59:46:b6:06:78:
3b:2d:8e:97:75:56:b4:84:52:3b:c8:32:c9:4d:b6:
96:c3:3c:a7:87:3f:a1:a8:c5:73:2e:a5:e4:3b:f3:
6a:e8:23:38:95:31:27:13:57:f1:d1:53:93:90:97:
0a:73:a9:74:53:02:80:20:a4:a4:aa:29:6f:f9:32:
ff:58:2c:a4:ef:6a:bb:b1:36:df:44:07:40:9c:eb:
00:a6:48:63:56:5a:84:d5:66:7b:86:ed:4b:96:f8:
2b:07:1c:10:b4:52:d8:e5:7d:3f:f8:fd:ab:65:df:
74:e1:36:3c:50:82:46:8d:ec:f3:19:51:4b:0c:e2:
65:7e:61:ab:58:e0:1b:57:1e:ed:71:23:42:46:8d:
05:7e:e2:f3:7f:a2:01:a0:d2:dd:f9:b5:33:f6:3d:
8b:e1:b0:60:96:a4:d2:75:62:10:42:f8:0f:4b:32:
b8:70:cb:b3:d4:52:20:26:cd:f9:e4:24:9a:10:a2:
99:4c:55:78:ee:03:62:69:81:a3:f1:2f:89:07:62:
a9:b3:a4:ab:b0:bc:06:2f:2a:8d:f5:8d:03:fe:93:
d7:58:d3:68:1f:2c:d3:58:36:68:0c:42:e7:bd:ce:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9D:DA:16:81:0E:C6:ED:46:F1:2F:E9:33:94:CB:C9:83:EA:71:1D
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9d:92:a6:d5:ea:86:66:56:cc:08:ce:d0:3e:ae:11:c0:5e:
fe:28:10:0e:95:5e:2e:bd:85:47:53:ba:0d:78:e5:18:4e:10:
1a:bc:29:d7:3f:f2:f0:94:9b:0d:d6:76:20:57:95:d3:0c:b7:
72:a8:c8:eb:0f:37:b2:52:a8:c6:30:29:29:82:54:7f:7b:1f:
6b:52:96:d4:f1:88:d9:4b:56:7f:b5:b3:d0:a2:2b:a3:db:75:
48:5b:37:9f:9f:3a:e4:98:81:d0:41:f4:3f:f5:cb:5f:60:d5:
11:d0:56:f3:db:a0:56:7a:a4:5e:3a:e2:07:b2:85:3b:2c:51:
0f:79:23:bd:62:3b:21:c1:c3:1c:8d:9f:08:82:44:43:60:84:
cd:de:04:3a:2c:18:61:76:ef:08:cd:81:32:1a:fa:fd:59:a5:
56:dc:3d:0f:6e:e6:49:76:b4:35:9c:29:c8:dc:7c:5f:f4:ae:
bc:82:eb:37:b8:1b:71:5a:94:fe:04:b5:db:5b:45:47:25:a6:
25:4d:b0:5f:70:25:03:d6:b3:9b:3e:a3:e8:f2:ea:f0:88:e0:
d9:8a:5a:31:ee:9d:dc:83:1c:2d:33:55:c3:5f:16:3e:61:79:
bb:c9:9e:f8:5a:33:16:d6:34:e9:e6:5f:12:c4:2d:c1:a4:11:
fa:ed:3a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPSQkPlFilbBh1QUgkhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTE4YjgwY2JiMzI3MzdhNDZiMjQ0ODY5YTZhZDU1MDk1
NDNmYTEwHhcNMjUxMDE5MTIwMTUyWhcNMjUxMDIwMTIwMTUyWjAzMTEwLwYDVQQD
EyhiZDlkZGExNjgxMGVjNmVkNDZmMTJmZTkzMzk0Y2JjOTgzZWE3MTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzkbVlUtUcGGszMs+TP0QT2ZjYRj
yCzgWUa2Bng7LY6XdVa0hFI7yDLJTbaWwzynhz+hqMVzLqXkO/Nq6CM4lTEnE1fx
0VOTkJcKc6l0UwKAIKSkqilv+TL/WCyk72q7sTbfRAdAnOsApkhjVlqE1WZ7hu1L
lvgrBxwQtFLY5X0/+P2rZd904TY8UIJGjezzGVFLDOJlfmGrWOAbVx7tcSNCRo0F
fuLzf6IBoNLd+bUz9j2L4bBglqTSdWIQQvgPSzK4cMuz1FIgJs355CSaEKKZTFV4
7gNiaYGj8S+JB2Kps6SrsLwGLyqN9Y0D/pPXWNNoHyzTWDZoDELnvc6EFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2d2haBDsbtRvEv6TOUy8mD6nEdMB8GA1UdIwQY
MBaAFJqRi4DLsyc3pGskSGmmrVUJVD+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODkt
MTkzN2JkZThjZDZmLzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81YzBiNGEtMmRhNC00M2E1LTkyODktMTkzN2JkZThjZDZm
LzEvbXBHTGdNdXpKemVrYXlSSWFhYXRWUWxVUDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ2SptXq
hmZWzAjO0D6uEcBe/igQDpVeLr2FR1O6DXjlGE4QGrwp1z/y8JSbDdZ2IFeV0wy3
cqjI6w83slKoxjApKYJUf3sfa1KW1PGI2UtWf7Wz0KIro9t1SFs3n5865JiB0EH0
P/XLX2DVEdBW89ugVnqkXjriB7KFOyxRD3kjvWI7IcHDHI2fCIJEQ2CEzd4EOiwY
YXbvCM2BMhr6/VmlVtw9D27mSXa0NZwpyNx8X/SuvILrN7gbcVqU/gS121tFRyWm
JU2wX3AlA9azmz6j6PLq8Ijg2YpaMe6d3IMcLTNVw18WPmF5u8me+FozFtY06eZf
EsQtwaQR+u065A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:58 2025 by rpki-client